This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer File: ZCurhFmUi3l0dkjhPpm50KWCUGo.cer (raw, json) Hash identifier: V5AyEfNscbaPTuNz5EaTIXb7tNqimQAZWQYWEx8w+t8= Subject key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791017AC606CED302D727FF7F2D7C73C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34986 IP: 193.104.166.0/24 IP: 193.188.253.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:17:ac:60:6c:ed:30:2d:72:7f:f7:f2:d7:c7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=642bab8459948b79747648e13e99b9d0a582506a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:df:55:3f:55:25:f4:26:19:7c:c6:f8:90: b3:dd:24:ce:87:c7:a7:8f:0e:89:42:a2:82:04:bb: d0:41:02:e8:e3:b8:6f:b8:64:04:19:39:2d:11:4c: c6:3c:39:15:c5:9b:4a:48:b7:46:3c:04:c0:29:80: ec:da:76:2b:ec:27:0a:98:23:a2:c6:40:75:11:cf: 53:d7:1d:4b:b8:7e:5d:2f:fe:bc:ab:69:fc:1e:cf: 21:53:be:29:98:44:0c:cf:ed:35:83:83:9b:56:f0: 4e:55:a9:e4:82:a3:21:d9:19:f1:77:8d:15:36:7c: 07:97:c2:12:98:9a:e5:44:e6:11:1c:6e:4b:74:2e: 71:71:e4:29:98:53:77:fe:3c:e4:61:9f:54:4f:40: fe:aa:a3:09:89:34:2b:03:09:1a:fe:4d:d6:6f:59: 05:b2:f3:87:0d:d1:15:fb:8b:f4:87:6e:5d:0b:55: 55:e2:84:08:1f:87:11:ac:f8:78:f6:b3:ed:ae:59: 56:f4:07:05:1b:d6:6b:a1:97:c6:d7:76:f2:3e:8c: 17:12:fa:68:66:5e:f8:4e:ba:2b:ec:d1:c0:0c:9e: 67:2c:db:36:02:f9:8a:c9:21:b5:4b:58:8f:2f:43: f0:e7:56:e1:ef:8b:e3:4f:7d:c8:90:37:d2:3c:be: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.166.0/24 193.188.253.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34986 Signature Algorithm: sha256WithRSAEncryption 28:71:f9:ae:e1:d7:36:7a:f3:45:bb:b3:e6:0c:b5:94:8b:a4: 9e:59:c4:2c:a3:03:16:2f:26:1d:0f:30:38:0d:49:62:fd:b0: fe:8d:a4:84:8f:51:d5:86:04:47:88:b0:1d:8f:be:b4:74:3c: 60:2c:94:c4:cb:48:6b:54:f5:40:b4:df:9f:30:7a:1d:21:9f: 05:25:0f:ee:51:37:e6:bb:a1:e2:cf:67:ae:9f:4e:a5:a8:05: 27:c6:7d:28:db:f9:3b:60:33:39:25:dc:b2:a8:06:3e:b1:f2: 54:63:8b:58:05:c4:27:d9:3d:d9:20:df:96:39:c9:4f:9c:69: 85:2d:27:8b:3e:96:b8:32:1c:10:e2:ff:82:db:b3:b7:86:ce: 92:9a:2f:53:6a:a5:39:28:c9:f9:ff:4e:7c:4e:70:e7:04:8e: 7b:24:34:20:83:87:30:51:ba:b2:91:62:91:a9:2b:4a:09:e5: af:b2:58:0f:50:58:e6:42:91:5c:e9:e1:eb:4f:2e:df:f9:97: 29:9d:4a:ff:4e:ab:20:3f:e9:d3:46:51:68:61:ff:09:b8:17: 4b:8f:26:d9:64:46:37:25:b9:b1:e8:44:fc:d5:44:ba:61:3a: f0:c5:70:ce:cf:b4:0f:9d:8a:4c:3f:56:e8:79:82:0b:05:d6: d1:59:13:af -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5EBesYGztMC1yf/fy18c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDJiYWI4NDU5OTQ4Yjc5NzQ3NjQ4ZTEzZTk5YjlkMGE1ODI1MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksHfVT9VJfQmGXzG+JCz3STOh8en jw6JQqKCBLvQQQLo47hvuGQEGTktEUzGPDkVxZtKSLdGPATAKYDs2nYr7CcKmCOi xkB1Ec9T1x1LuH5dL/68q2n8Hs8hU74pmEQMz+01g4ObVvBOVankgqMh2Rnxd40V NnwHl8ISmJrlROYRHG5LdC5xceQpmFN3/jzkYZ9UT0D+qqMJiTQrAwka/k3Wb1kF svOHDdEV+4v0h25dC1VV4oQIH4cRrPh49rPtrllW9AcFG9ZroZfG13byPowXEvpo Zl74Tror7NHADJ5nLNs2AvmKySG1S1iPL0Pw51bh74vjT33IkDfSPL77VwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGQrq4RZlIt5dHZI4T6ZudClglBqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzVlYzMw Yy0yYWVmLTQ3YWItYjBlYy01YjE1NTIzYmZjYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNWVjMzBj LTJhZWYtNDdhYi1iMGVjLTViMTU1MjNiZmNiYi8xL1pDdXJoRm1VaTNsMGRramhQ cG01MEtXQ1VHby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwWimAwQAwbz9MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCIqjANBgkqhkiG9w0BAQsFAAOCAQEAKHH5ruHXNnrzRbuz5gy1lIuk nlnELKMDFi8mHQ8wOA1JYv2w/o2khI9R1YYER4iwHY++tHQ8YCyUxMtIa1T1QLTf nzB6HSGfBSUP7lE35ruh4s9nrp9OpagFJ8Z9KNv5O2AzOSXcsqgGPrHyVGOLWAXE J9k92SDfljnJT5xphS0niz6WuDIcEOL/gtuzt4bOkpovU2qlOSjJ+f9OfE5w5wSO eyQ0IIOHMFG6spFikakrSgnlr7JYD1BY5kKRXOnh608u3/mXKZ1K/06rID/p00ZR aGH/CbgXS48m2WRGNyW5sehE/NVEumE68MVwzs+0D52KTD9W6HmCCwXW0VkTrw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:05 2026 by rpki-client